Known vulnerabilities in Oras

Vendor: Deislabs
Software: Oras
Software CPE: cpe:2.3::deislabs:oras:*:*:*:*:*:*:*:*
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oras Oras is affected by 1 known vulnerabilities: 1 medium Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70623 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-21272
CWE-59 Medium
No
No
0.9.0 03.01.2023 SB2021012530
SB2023010307